Clinical Mind AI HECVAT 4.1.6 July 2026.xlsx

	A	B	C	D	E	F	G
2	HECVAT™ Solution Provider Response - Start Here					Version 4.1.6
3	Date Completed		2026-07-09
4	Instructions for Solution Providers
5	1. Complete the "Start Here" tab and review the "Required Questions" guidance to find the other sections are required for your product or service.
6	2. Complete the "Organization" tab and the applicable questions in each of the next 5 tabs (Product through Privacy) that apply, based on your answers to the "Required Questions."
7	3. Guidance in column E may change based on your answers to prompt details in "Additional Information." If leaving an answer blank, you must also state why in "Additional Information".
8	4. DO NOT complete any fields in the "Evaluation" sheets or the "Analyst Notes" column.
9	5. Return the completed file to institutions.
10	* Denotes critical questions. Critical questions are those deemed most important to institutions by higher education volunteers.
11	For full instructions, please visit educause.edu/HECVAT
12	General Information
13	GNRL-01	Solution Provider Name	Stanford University
14	GNRL-02	Solution Name	Clinical Mind AI
15	GNRL-03	Solution Description	Clinical Mind AI is a Stanford University research platform for improving clinical reasoning through AI-simulated clinical cases and physician-patient interactions. It is not a commercial ed-tech product and is not sold as a product; these responses are provided for transparency with institutional collaborators.
16	GNRL-04	Solution Provider Contact Name	Clinical Mind AI team
17	GNRL-05	Solution Provider Contact Title	Stanford University research project team
18	GNRL-06	Solution Provider Contact Email	clinicalmindai@stanford.edu
19	GNRL-07	Solution Provider Contact Phone Number	Available upon request through the Clinical Mind AI team.
20	GNRL-08	Country of Company Headquarters	United States
21	GNRL-09	Employee Work Locations (all)	United States; Stanford University project team and approved collaborators as applicable.
22	Company Information		Answer	Additional Information	Guidance	Analyst Notes
23	COMP-01	Do you have a dedicated software and system development team(s) (e.g., customer support, implementation, product management, etc.)?*	Yes	Project engineering, product, implementation, and support functions are handled by the Stanford Clinical Mind AI team and collaborators.	Describe the structure and size of your software and system development teams. (e.g., customer support, implementation, product management, etc.).
24	COMP-02	Describe your organization’s business background and ownership structure, including all parent and subsidiary relationships.	Clinical Mind AI is operated by Stanford University as a research and educational research platform. It is not a standalone vendor or commercial product for sale. Governance, privacy, and security obligations are handled through Stanford University policies and the relevant research collaboration agreements with participating institutions.	Supplemental context provided for transparency.	Include circumstances that may involve offshoring or multinational agreements.
25	COMP-03	Have you operated without unplanned disruptions to this solution in the past 12 months?	Yes	Project owner confirms no material security, privacy, uptime, data-loss, or accessibility incidents to disclose as of July 9, 2026.
26	COMP-04	Do you have a dedicated information security staff or office?	Yes	Stanford University information security and privacy functions apply; Clinical Mind AI is not a separate commercial company.	Describe your information security office, including size, talents, resources, etc.
27	COMP-05	Use this area to share information about your environment that will assist those who are assessing your company's data security program.	The platform is developed and maintained by the Clinical Mind AI project team with Stanford University oversight. Operational, security, and privacy review responsibilities are handled through Stanford University project governance and institutional processes.	Supplemental context provided for transparency.	Share any details that would help information security analysts assess your solution.		End Table Data
28	Required Questions		Answer	Additional Information	Guidance	Analyst Notes
29	REQU-01	Are you offering a cloud-based product?	Yes	The service is cloud hosted.	DO complete the Product and Infrastructure worksheets
30	REQU-02	Does your product or service have an interface?	Yes	The current assessed platform has a web interface. No standalone mobile application has been developed or distributed as of July 9, 2026.	DO complete the IT Accessibility worksheet.
31	REQU-03	Are you providing consulting services?	No	Clinical Mind AI is a research platform, not a consulting service.	DO NOT complete the Consulting section in the Case-Specific worksheet
32	REQU-04	Does your solution have AI features, or are there plans to implement AI features in the next 12 months?	Yes	AI features are central to simulated patients, generation assistance, parsing/autofill, avatars, and optional feedback.	DO complete the Artificial Intelligence (AI) worksheet
33	REQU-05	Does your solution process protected health information (PHI) or any data covered by the Health Insurance Portability and Accountability Act (HIPAA)?	No	The platform is not intended to process real PHI or provide clinical care. Any PHI/HIPAA use would require separate Stanford review and approval.	DO NOT complete the HIPAA section in the Case-Specific worksheet
34	REQU-06	Is the solution designed to process, store, or transmit credit card information?	No	The platform does not process, store, or transmit payment-card data.	DO NOT complete the PCI-DSS section in the Case-Specific worksheet
35	REQU-07	Does operating your solution require the institution to operate a physical or virtual appliance in their own environment or to provide inbound firewall exceptions to allow your employees to remotely administer systems in the institution's environment?	No	No institution-operated appliance or inbound campus network connection is required.	DO NOT complete the On-Prem section in the Case-Specific worksheet
36	REQU-08	Does your solution have access to personal or institutional data?	Yes	The platform processes user account, course, institutional, interaction, and educational/research data.	DO complete the Privacy tab		End Table Data
37	Note: The "Organization" tab is required for ALL products and services.
38	Copyright © 2025 EDUCAUSE
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104